$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa File: bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa (raw, json) Hash identifier: znay8bYUl9VjgEID/j+x7YNIOvi4egKNEr0ECcZbU5Q= Subject key identifier: 9D:2A:16:05:62:62:3F:94:7B:42:DE:1F:27:76:CF:70:6E:21:39:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49801C7B145B1F7F9AD30C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 107.3.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:1c:7b:14:5b:1f:7f:9a:d3:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26a2420a-ea4f-4b77-8e5b-17c9a5aa4945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:75:32:73:64:15:eb:34:dd:49:ba:f2:42: 53:1d:f0:46:7e:a9:df:16:67:6b:58:28:c3:11:64: 7a:41:ee:0b:c0:cd:6a:93:53:a9:35:89:41:3b:8f: c5:c4:23:5d:0a:5e:1f:1e:88:a7:67:4d:99:89:e8: 10:85:19:65:ec:bb:42:e1:b7:96:16:8a:44:8c:b1: e2:80:cf:d0:14:be:de:23:20:6e:cf:59:b3:c7:0e: a5:14:f8:24:e1:06:a3:c8:54:12:c6:c1:fd:b2:a6: 75:a6:f4:69:0a:25:29:b5:d6:df:a2:dd:6f:b0:73: 4a:01:d0:61:55:b8:7d:ff:eb:55:ee:56:10:0c:f4: 47:58:d1:aa:0f:fc:85:18:20:9a:27:56:19:74:86: 55:6c:23:c1:82:b5:1c:52:70:07:2e:44:ca:d4:f3: d9:72:85:9a:22:52:1e:64:35:7d:e4:98:2a:89:35: 6d:42:3a:0c:9e:83:ab:68:30:66:37:1b:ba:fe:f4: 8b:ae:dc:f7:32:81:ef:8a:96:7a:3a:e6:d7:31:13: 49:64:97:bc:c7:ad:93:c4:b7:bd:44:31:0e:a9:4d: 16:38:33:a9:28:9c:f7:3c:aa:b8:f1:d8:96:3e:f6: 62:3a:f3:16:01:56:00:56:a2:42:2b:3c:c3:a6:e1: 88:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:16:05:62:62:3F:94:7B:42:DE:1F:27:76:CF:70:6E:21:39:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1d8ae3-4f0f-3fd6-8c7f-f7c71b0a0542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:07:4a:32:fe:1e:70:36:30:2a:bb:62:12:5d:cb:99:0e:bb: a5:58:4c:e9:14:28:af:d3:9f:cd:06:1d:61:76:53:52:9b:15: 52:91:8b:c3:48:67:33:2d:c1:bc:d4:03:c8:aa:f5:ae:22:1c: 26:aa:89:65:b3:11:f2:9f:95:54:38:55:1b:c1:c8:d4:f4:a7: 7d:05:d9:59:3d:e7:15:49:44:86:1e:2a:d7:21:10:40:9e:3c: d6:6e:51:ed:9d:3e:a1:d7:ec:ad:a1:21:af:6d:b1:24:20:72: 99:74:98:20:4f:21:73:67:fb:02:3e:77:1c:77:5f:d5:21:26: 23:af:03:9e:2c:01:9d:ec:a3:a1:d9:5f:1c:f7:a1:98:c9:94: 23:14:58:c3:6e:6f:14:31:17:11:d7:ca:f5:34:52:89:e3:06: 36:96:92:ee:85:e5:3a:c2:99:b6:6e:81:fa:25:6e:83:90:ef: 83:df:d4:08:d0:03:c9:e1:cf:5a:ad:2f:f4:e5:eb:40:d6:c7: 68:08:c4:a7:2a:50:79:75:a3:6b:30:4b:c4:da:55:37:ec:92: d4:a9:90:d3:60:4e:60:3d:cf:8a:74:8c:e9:9a:04:90:b3:07: 95:bd:95:e9:64:40:5d:16:49:af:8d:ff:8d:02:79:d3:97:e5: 00:aa:4b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgBx7FFsff5rTDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjZhMjQyMGEtZWE0Zi00Yjc3LThlNWItMTdjOWE1YWE0OTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp51MnNkFes03Um68kJTHfBGfqnfFmdrWCjD EWR6Qe4LwM1qk1OpNYlBO4/FxCNdCl4fHoinZ02ZiegQhRll7LtC4beWFopEjLHi gM/QFL7eIyBuz1mzxw6lFPgk4QajyFQSxsH9sqZ1pvRpCiUptdbfot1vsHNKAdBh Vbh9/+tV7lYQDPRHWNGqD/yFGCCaJ1YZdIZVbCPBgrUcUnAHLkTK1PPZcoWaIlIe ZDV95JgqiTVtQjoMnoOraDBmNxu6/vSLrtz3MoHvipZ6OubXMRNJZJe8x62TxLe9 RDEOqU0WODOpKJz3PKq48diWPvZiOvMWAVYAVqJCKzzDpuGIawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0qFgViYj+Ue0LeHyd2z3BuITkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQxZDhhZTMtNGYwZi0z ZmQ2LThjN2YtZjdjNzFiMGEwNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYHSjL+HnA2MCq7YhJdy5kOu6VYTOkUKK/Tn80GHWF2U1KbFVKRi8NI ZzMtwbzUA8iq9a4iHCaqiWWzEfKflVQ4VRvByNT0p30F2Vk95xVJRIYeKtchEECe PNZuUe2dPqHX7K2hIa9tsSQgcpl0mCBPIXNn+wI+dxx3X9UhJiOvA54sAZ3so6HZ Xxz3oZjJlCMUWMNubxQxFxHXyvU0UonjBjaWku6F5TrCmbZugfolboOQ74Pf1AjQ A8nhz1qtL/Tl60DWx2gIxKcqUHl1o2swS8TaVTfsktSpkNNgTmA9z4p0jOmaBJCz B5W9lelkQF0WSa+N/40CedOX5QCqSz0= -----END CERTIFICATE-----Generated at Fri Sep 25 20:55:07 2026 by rpki-client